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CLAIMS 

1 . A data authentication system comprising: 

A. an integrity check processor that 

i. selects one or more integrity functions from a set of functions, and 
iL manipulates m selected data bytes from each of one or more data 
packets in accordance with the selected integrity check functions to 
produce one or more integrity checks that correspond to the one or 
more data packets; and 

B. an integrity block processor that encrypts the one or more integrity checks 
produced by the integrity check processor and produces an integrity block that is 
used to authenticate the data packets. 

2. The data authentication system of claim 1 wherein the integrity check processor in- 
cludes in the integrity check an indication of which integrity function to select. 

3. The data authentication system of claim 2 wherein the indication is a function identi- 
fier. 

4. The data authentication system of claim 2 wherein the indication is an offset value for 
a pseudorandom sequence known to a sender and an intended recipient. 

5. The data authentication system of claim 4 wherein the pseudorandom sequence is 
generated using a seed value known by the sender and the intended recipient. 

6. The data authentication system of claim 1 wherein the integrity check processor uses 
information in the one or more data packets as one or more offset values for a pseudoran- 
dom sequence known to a sender and an intended recipient. 

7. The data authentication system of claim 6 wherein the pseudorandom sequence is 
generated using a seed value known by the sender and the intended recipient. 
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8. The data authentication processor of claim 2 wherein the integrity check processor 
selects more than one integrity function for a given data packet and includes in the integ- 
rity check information that identifies a list of the selected functions and a corresponding 
list of the results of the manipulations. 

9. The data authentication system of claim 1 wherein the integrity block processor en- 
crypts the integrity checks in accordance with a secret key that is shared by intended re- 
cipients of the data packets. 

10. The data authentication system of claim 1 wherein the integrity check processor se- 
lects the m data bytes at random from a first data packet, and for any remaining data 
packets selects data bytes that are offset from the data bytes selected from the first data 
packet. 

1 1 . The data authentication system of claim 1 wherein the integrity block processor en- 
crypts into the integrity block information that identifies the data bytes selected from 
each of the data packets. 

12. The data authentication system of claim 1 1 wherein the information includes data 
byte interval and offset values. 

13. The data authentication system of claim 1 wherein the integrity check processor in- 
cludes in the integrity checks one or more sequence numbers that are associated with the 
data packets. 

14. The data authentication system of claim 1 wherein the integrity block processor as- 
sembles the plurality of integrity checks in an order that differs from the order of the data 
packets and encrypts into the integrity block information that associates the integrity 
checks with the appropriate data packets. 
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1 15. The data authentication system of claim 14 wherein the integrity block processor en- 

2 crypts into the integrity block a list of sequence numbers that corresponds to the order of 

3 the integrity checks within the integrity block. 

1 16. The data authentication system of claim 1 wherein the integrity check processor pro- 

2 duces digital signatures for one or more of the data packets and includes the digital sig- 

3 natures in the respective data packets. 

1 17. The data authentication system of claim 1 wherein the integrity block processor pro- 

2 duces a digital signature for the integrity block and includes the digital signature in the 

3 integrity block. 

1 1 8. The data authentication system of claim 1 wherein the selected integrity check func- 

2 tion concatenates the selected data bytes from a given data packet to produce the associ- 

3 ated integrity check. 

1 19. The data authentication system of claim 1 further including a chaff processor for pro- 

2 ducing for transmission extraneous packets that are associated with and do not pass one 

3 or more of the integrity checks, the chaff processor including the extraneous packets in a 

4 transmission that includes the data packets. 

1 20. The data authentication system of claim 1 wherein the integrity block processor en- 

2 crypts into the integrity block executable code that performs the selected integrity check 

3 function. 

1 21 . The data authentication system of claim 20 wherein the integrity block processor 

2 signs the executable code with a digital signature. 

1 22. A communications network comprising: 

2 A. one or more sending stations for sending data packets; 
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B. one or more recipient stations for receiving the data packets sent by the 
sending stations; and 

C. an authentication system that includes 
L an integrity block processor 

a. for selecting one or more integrity functions from a set of 
integrity functions, 

b. manipulating one or more selected data bytes from a given 
data packet in accordance with the one or more selected 
integrity check functions to produce the corresponding in- 
tegrity check, and 

c. encrypting the one or more integrity checks that are associ- 
ated with one or more data packets to produce an integrity 
block and including the integrity block in a transmission to 
the recipient stations, and 

ii. authentication means for decrypting a received integrity block to 
reproduce the one or more integrity checks and using information 
contained in the reproduced integrity checks to select one or more 
integrity check functions and one or more data bytes to use to de- 
termine if data in the associated one or more data packets have 
been altered. 

23. The communications network of claim 22 wherein the authentication means selects 
the one or more integrity check functions for use in authenticating the data packets based 
on identifying information in the associated integrity check. 

24. The communications network of claim 22 wherein the authentication means uses in- 
formation in the integrity check or in the associated data packet as an offset value into a 
pseudo random sequence known to the sender and an intended recipient and uses the next 
n bits of the sequence to identify the selected integrity check. 
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25. The communications network of claim 22 wherein the authentication means uses the 
one or more integrity checks, the integrity check functions identified therein and the se- 
lected data bytes from the one or more data packets to determine if the data packets have 
been altered. 

26. The communications network of claim 22 wherein the integrity block processor is 
included in each of the one or more sending stations and the authentication means is in- 
cluded in each of the one or more recipient stations. 

27. The communications network of claim 22 wherein the integrity block processor en- 
crypts the integrity checks and the authentication means decrypts the integrity blocks in 
accordance with one or more secret keys that are shared by the sending stations and the 
intended recipient stations. 

28. The communications network of claim 22 wherein the integrity block processor se- 
lects one or more data bytes at random from a first data packet and selects from the re- 
maining data packets data bytes that are offset from the data bytes selected from the first 
data packet based on the information contained in the associated integrity checks. 

29. The communications network of claim 22 wherein the integrity block processor en- 
crypts into an integrity block the information that identifies the integrity check function. 

30. The communications network of claim 22 wherein the integrity block processor en- 
crypts into an integrity block the information that identifies the data bytes selected for 
each of the one or more data packets by the integrity block processor. 

31 . The communications network of claim 30 wherein the information includes data byte 
interval and offset values. 
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32. The communications network of claim 22 wherein the integrity block processor fur- 
ther includes in the integrity block sequence numbers that correspond to the associated 
data packets. 

33. The communications network of claim 22 wherein the authentication means assem- 
bles the integrity checks in an order that differs from the order of the associated data 
packets and encrypts into the integrity block information that associates the integrity 
checks with the appropriate data packets. 

34. The communications network of claim 33 wherein the authentication means further 
encrypts into the integrity block a list of data packet sequence numbers that corresponds 
to the order of the integrity checks within the integrity block. 

35. The communications system of claim 22 wherein the authentication means further 
produces a digital signature for each data packet and includes the digital signature in the 
data packet. 

36. The communications system of claim 22 wherein the authentication means concate- 
nates selected data bytes from a given data packet to produce the associated integrity 
check. 

37. The communications system of claim 22 wherein the authentication means encodes 
selected bytes from a given data packet to produce the associated integrity check. 

38. The communications system of claim 22 further including a chaff processor that pro- 
duces for transmission one or more extraneous packets that are associated with and do not 
pass one or more of the integrity checks, the chaff processor including the extraneous 
packets in a transmission with the associated data packets. 

39. The communications system of claim 22 wherein the integrity block processor further 
includes in the integrity block executable code that performs an integrity check process. 
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40. The communications system of claim 39 wherein the integrity block processor in- 
cludes in an integrity block a digital signature that corresponds to the executable code. 

41. A method of authenticating data that is sent in data packets, the method including the 
steps of: 

A. selecting one or more integrity functions from a set of integrity functions; 

B. manipulating selected data bytes from a first data packet in accordance 
with one or more of the selected integrity functions to produce an integrity 
check; 

C. encrypting the integrity check to produce an integrity block; 

D. sending the integrity block to intended recipients. 

42. The method of claim 41 further including the steps of: 

E. decrypting a received integrity block to reproduce the integrity check; 

F. selecting one or more integrity check functions from the set of functions; 

G. using the reproduced integrity check and the selected integrity check 
functions to determine if the first data packet is authentic. 

43. The method of claim 42 further including the steps of 

H. manipulating data bytes from additional data packets in accordance with 
one or more of the selected integrity check functions to produce additional 
integrity checks; 

I. encrypting the additional integrity checks into the integrity block; 

J. decrypting the received integrity block to reproduce the additional integ- 
rity checks; 

K. selecting one or more integrity check functions; and 

L. using the reproduced additional integrity checks and the selected integrity 

check functions to determine if respective additional data packets are 

authentic. 
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44. The method of claim 41 wherein the step of selecting the integrity functions includes 
providing associated identifiers as part of the integrity check. 

45. The method of claim 41 wherein the step of selecting the integrity functions includes 

i. using information in the data packet as an offset value into a pseudorandom 
sequence, and 

ii. using the next n bits of the sequence as the integrity function identifier. 

46. The method of claim 43 further including in the step of encrypting the integrity 
checks, performing the encryption in accordance with a secret key that is available to the 
recipients. 

47. The method of claim 46 further including in the step of decrypting the integrity 
block, decrypting the block in accordance with the secret key. 

48. The method of claim 43 wherein the step of manipulating data bytes selects the data 
bytes at random from the first data packet and selects from the additional data packets 
data bytes that are offset from the data bytes selected from the first data packet. 

49. The method of claim 43 wherein the step of encrypting the integrity checks further 
includes encrypting into the integrity block information that identifies the data bytes se- 
lected from the data packets. 

50. The method of claim 43 further including in the step of encrypting the integrity 
checks the step of encrypting into the integrity block data byte interval and offset values. 

51. The method of claim 43 wherein the step of manipulating the data bytes to produce 
the integrity checks further includes the step of including in the integrity checks sequence 
numbers that correspond to the associated data packets. 
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52. The method of claim 43 wherein the step of encrypting the integrity checks includes 
assembling the integrity checks in an order that differs from the order of the associated 
data packets. 

53. The method of claim 52 wherein the encrypting step further includes the step of en- 
crypting into the integrity block a list of sequence numbers that corresponds to the order 
of the integrity checks. 

54. The method of claim 43 further including the step of producing a digital signature for 
each data packet and including the digital signature in the data packet. 

55. The method of claim 42 further including the step of producing a digital signature for 
the integrity block and including the signature in the block. 

56. The method of claim 43 wherein the step of manipulating the selective data bytes 
includes concatenating the selected data bytes from a given data packet to produce the 
associated integrity check. 

57. The method of claim 43 wherein the step of manipulating the selected data bytes in- 
cludes encoding the selected bytes from a given data packet to produce the associated in- 
tegrity check. 

58. The method of claim 42 further including the step of including in a transmission ex- 
traneous packets that are associated with and do not pass one or more of the integrity 
checks. 

59. The method of claim 42 wherein the step of encrypting the integrity checks further 
includes encrypting into the integrity block executable code that performs an integrity 
check process. 
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60. The method of claim 59 wherein the encrypting step further includes encrypting into 
the integrity block a digital signature associated with the code. 

61 . A data authentication system comprising: 

A. an integrity block processor that receives a plurality of data packets and an 
associated integrity block, the integrity block processor manipulating the integrity 
block to produce a plurality of integrity checks that correspond to the data pack- 
ets, and 

B. an integrity check processor that uses the integrity checks, integrity check 
functions selected from a set of functions and selected data bytes from the data 
packets to determine if any of the data packets have been altered. 

62. The authentication system of claim 61 wherein the integrity block processor further 
produces from the integrity block information to determine which data bytes to select 
from the data packets. 

63. The authentication system of claim 61 wherein the integrity block processor pro- 
duces from the integrity block information to select which integrity check functions to 
use to manipulate the selected data packets. 

64. The authentication system of claim 63 wherein the information determines which 
function or functions to use for each data packet. 

65. The authentication system of claim 61 wherein the integrity block processor decrypts 
the integrity block to produce the plurality of integrity checks. 

66. The authentication system of claim 65 wherein the integrity block processor uses a 
shared secret key to decrypt the integrity block. 
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67. The authentication system of claim 65 wherein the integrity block processor decrypts 
the integrity block to provide to the integrity check processor executable code to use to 
manipulate the selected data bytes. 

68. The authentication system of claim 62 wherein the integrity block processor decrypts 
the integrity block to produce the integrity checks and the integrity check processor uses 
information in the integrity checks to determine which data bytes to select from the one 
or more data packets. 

69. The authentication system of claim 63 wherein the integrity check processor uses a 
digital signature included in the integrity block to authenticate the integrity block. 

70. The authentication system of claim 61 wherein the integrity check processor uses one 
or more digital signatures included in the one or more data packets to further authenticate 
the data packets. 

71 . A system for authenticating one or more data packets, the system comprising: 

A. means for configuring at least one sending station with an authentication proc- 
ess adapted to produce an encrypted integrity block from one or more integrity checks 
associated with one or more data packets and one or more integrity functions selected 
from a set of integrity functions; 

B. means for configuring at least one receiving station with an authentication 
process adapted to decrypt a received integrity block into one or more integrity checks 
and authenticate the associated one or more data packets using the one or more integrity 
checks and associated selected integrity functions. 

72. The system of claim 71 wherein the receiving station selects, based on information 
contained in the integrity block, the one or more integrity functions from the set of func- 
tions and one or more selected data bytes from each of the one or more packets to use in 
the authentication process. 
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73. The system of claim 71 wherein the means for configuring at least one sending sta- 
tion includes a computer readable medium containing executable program instructions. 

74. The system of claim 71 wherein the means for configuring at least one receiving sta- 
tion includes a computer readable medium containing executable code. 

75. The system of claim 71 further including means for configuring the sending station 
to transmit extraneous data packets that are associated with the integrity block but do not 
pass authentication. 

76. A computer data signal embodied in a carrier wave and representing sequences of 
instructions for authenticating data packets, the instructions comprising instructions for: 

configuring at least one sending station to produce an encrypted integrity block 
for a plurality of data packets using one or more integrity check functions selected from a 
set of integrity check functions; and 

at the configured sending station selecting one or more data bytes from each data 
packet and producing an associated integrity check that is used with the integrity checks 
for the other data packets to produce the encrypted integrity block. 

77. The computer data signal of claim 76 wherein the selection of data bytes from a first 
data packet is random and the data bytes selected from remaining data packets are offset 
from the data bytes selected from first data packet. 

78. The computer data signal of claim 76 wherein the integrity block is encrypted in ac- 
cordance with a shared secret key. 

79. The computer data signal of claim 76 wherein the one or more integrity checks are 
produced by concatenating selected data bytes from respective data packets. 

80. The computer data signal of claim 76 wherein the one or more integrity checks are 
produced by encoding selected data bytes from respective data packets. 
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8L The data signal of claim 76 further comprising instructions for 

configuring at least one receiving station to decrypt the encrypted integrity block 

to reproduce the one or more integrity checks; and 

at the configured receiving station using the one or more integrity checks to 

authenticate the one or more data packets. 

82. The computer data signal of claim 81 wherein the one or more integrity checks are 
associated with the appropriate one or more data packets prior to authentication. 

83. The computer data signal of claim 76 further including configuring the sending sta- 
tion to transmit one or more extraneous data packets that are associated with the integrity 
block but do not pass authentication tests. 
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84. A data authentication system in which sequences of instructions for authenticating 
data packets are stored on a machine-readable medium, the instructions comprising in- 
structions for: 

configuring at least one sending station to produce an encrypted integrity block 
for one or more data packets; and 

at the configured sending station selecting one or more data bytes from the one or 
more data packets and producing one or more integrity checks using integrity functions 
that are selected from a set of functions, and encrypting the results and information that 
identifies the selected functions for each packet to produce the encrypted integrity block. 
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ABSTRACT OF THE DISCLOSURE 

A data authentication system that at the sender produces for a plurality of data 
packets a plurality of "integrity checks" by selecting an integrity function from a family 
or set of integrity functions, selecting a number of bytes from a given packet and ma- 
nipulating the bytes in accordance with the selected integrity function to produce the in- 
tegrity check. The system then selects corresponding bytes or bytes that are offset from 
the corresponding bytes from a next packet and produces a next associated integrity 
check using the same or another selected integrity check function, and so forth. The sys- 
tem encrypts the integrity checks associated with the plurality of data packets using, for 
example, a shared secret key, and produces an integrity block. The system then sends the 
encrypted integrity block and the data packets to the intended recipients. A recipient de- 
crypts the integrity block using the shared secret key and reproduces the integrity checks. 
It then uses the integrity checks to authenticate the associated data packets by manipu- 
lating selected data bytes in accordance with selected integrity check functions. The re- 
cipient thus authenticates a plurality of data packets by performing a single decryption 
operation and a plurality of relatively fast integrity check operations using a selection of 
integrity check functions that are unknown to an interloper. The sender may also include 
in a transmission one or more extraneous, or "chaff," data packets, which are data packets 
that intentionally fail the associated integrity checks. The sender may, for example, in- 
clude in a transmission multiple sets of packets with the same sequence numbers. The 
recipient readily determines which of the packets with the same sequence numbers are 
valid using the appropriate integrity check. However, an interloper who cannot decipher 
the encrypted integrity block cannot as easily determine which of the packets are valid, 
and thus, cannot determine which packets to alter and/or how to alter these packets with- 
out detection by the integrity checks. 
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